Open Source

If you want better harness coding agents, the fastest lever is rarely a newer model — it is the harness that surrounds the model. Better-Harness is an MIT-licensed, open-source harness engineering platform from QoderAI that runs inside your existing coding agents (Claude Code, Codex, Cursor, and more) rather than replacing them. It combines feedforward guides with feedback sensors, then evaluates your agent across five work-dimension scores that keep missing evidence explicit instead of fabricating plausible numbers. ...

Warp is an agentic development environment (ADE) built not as another code editor or a headless CLI tool, but as a GPU-accelerated terminal that expanded outward into an AI coding platform. By mid-2026 it passed one million active developers, ships agents with Full Terminal Use that other tools cannot offer, and open-sourced its core under AGPL-3.0 with OpenAI as the flagship sponsor. It is the clearest working example of the idea that coding agents do not need an IDE — they need a shell. ...

Dark-Agent is the first open-source Mythic C2 agent with a full in-memory BOF (Beacon Object File / COFF) loader purpose-built for macOS and Linux. Written in Crystal, it loads Beacon Object Files entirely in memory — no disk writes, no temporary files, no child processes — and has been used operationally by the ServiceNow Red Team since 2024. What Is Dark-Agent? A Mythic C2 Agent Purpose-Built for Linux and macOS Mythic is an open-source, cross-platform C2 (command-and-control) framework that makes it easy to extend an agent and swap in alternative C2 profiles without recompiling. Most of the well-known Mythic agents — Apollo, Xenon, Poseidon, and the Java-based options — either focus on Windows or treat Unix as a second-class citizen. Dark-Agent, released by ServiceNow under an open license, is built explicitly to change that. ...

MobARK (Mobile Application Reverse Kit) is a self-hosted, open-source mobile appsec platform for Android and iOS that pairs static analysis with a built-in AI Agent. Its defining feature is an AI Agent that chats with your decompiled code through a local LLM (Ollama, LM Studio, or BYOK), so no binary or source data leaves your infrastructure by default. It is Apache-2.0 licensed, requires Python 3.11+ and Node 18+, and runs as a four-container Docker Compose stack. This review covers its features, privacy model, limitations, and how it compares to MobSF and commercial MAST tools in 2026. ...

OpenSheet is an in-browser spreadsheet framework built specifically for AI agents, letting them read, query, and directly edit cells in CSV and Parquet files without sending your data to a cloud server. It runs on duckdb-wasm for local processing and evolved from the author’s earlier DataKit project. This review explains how it works, why spreadsheets are uniquely hard for LLMs, and how it compares to the growing field of spreadsheet agents. ...

A self-updating weekly radar of trending GitHub repos is a scheduled pipeline that scrapes github.com/trending or the GitHub search API, deduplicates and ranks the results, and emits a markdown digest to your repo or blog with zero manual effort. In 2026, when AI tooling can add 100,000+ stars in a week, a manual weekly roundup is no longer fast enough. This guide shows you how to build one with GitHub Actions. ...

CyberForge is a Python-based, modular cybersecurity LLM agent framework built for lab environments, VM research, adversary emulation, detection engineering, and purple team automation. It decouples reusable BaseAgent and BaseTask classes, supports six or more LLM providers (Gemini, NVIDIA NIM, OpenRouter, OpenAI, Anthropic, and local Ollama), and ships a deterministic offline Lab Mock Mode so you can prototype agent workflows with zero API spend. This review walks through what it does, how it runs, and whether it earns a place in your SOC toolkit. ...

Moli is a production-ready, structured-first browser engine for AI agents, written in pure Rust. It runs real JavaScript, DOM, and browser APIs by default, but computes layout or pixels only when you ask — a cost model built for crawling, browser-use, and retrieval workloads. In a 192-URL crawl it beat Chrome Headless on useful-page rate while using roughly 10x less memory. What Is Moli? A Structured-First Browser Engine for AI Agents Moli is not another Chromium wrapper. It is a browser kernel built from the ground up in Rust, designed around a single idea: AI agents mostly want the structure of a page — the DOM, the computed styles, the text — not a rendered picture of it. Traditional headless browsers spend enormous effort producing pixels that most agent workloads never look at. ...

Density is an open-source flight recorder for AI agents that solves the growing problem of agent trace storage bloat. Instead of deleting traces to save space, Density compresses them into a tiered storage system — HOT, WARM, and COLD — with verifiable recall guarantees at each tier. It achieves up to 50.6x compression on traces and 32x on embeddings while maintaining recall above 0.99, making it the first storage-layer observability tool that lets you keep everything without guessing what you will lose. ...

What Is Clai? — Stdin to LLM to Stdout Clai is a command-line AI tool that reads text from standard input, sends it to a large language model, and writes the response to standard output. That is it. No interactive REPL, no session state, no chat history, no plugin ecosystem, no GUI. Written in Go and released as a single binary, Clai embodies the Unix philosophy: do one thing well and compose with other tools via pipes. At version 0.3.0 as of July 2026, it is an early-stage project with a clear philosophical stance that sets it apart from every other AI CLI tool on the market. ...